$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: WJkzWhpA9yF/bHstxTSIjnmauF2QgMQq13s2m+KNqbE= Subject key identifier: E0:4F:29:31:96:2B:47:C8:A3:CC:A7:7F:F9:89:30:59:95:9F:2B:DC Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 275217919D26B4F3430D85D44D8DCE1675D54BBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 0127 Signing time: Mon 20 Apr 2026 18:11:59 +0000 Manifest this update: Mon 20 Apr 2026 18:06:59 +0000 Manifest next update: Fri 24 Apr 2026 01:45:59 +0000 Files and hashes: 1: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: yODk8bCTWuVQkxGhWnY2XCowZhVDfoNu4GVsxzqVTqY=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 3: 3135372e36362e3235302e302f32342d3234203d3e20313532373635.roa (hash: j5xRnyx9ltTxdxtyDGq7eViM99V3PYzjmvt9btMBjHc=) 4: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (hash: 8Vg70sDR83+R4h61BM4oF6HfBSYpvZjABNGi/+A+V20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:52:17:91:9d:26:b4:f3:43:0d:85:d4:4d:8d:ce:16:75:d5:4b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Apr 20 18:06:59 2026 GMT Not After : Apr 24 01:45:59 2026 GMT Subject: CN=E04F2931962B47C8A3CCA77FF9893059959F2BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:8e:24:4c:45:7b:2e:e9:84:ed:c6:ec:13: f9:33:89:e2:7f:58:20:c5:2b:af:5c:b7:9f:ca:e2: 6e:28:ca:01:87:cd:c0:d5:aa:93:bb:af:55:b6:e5: 04:23:75:77:b6:53:6e:db:f2:52:b8:11:8a:29:74: 30:73:e1:10:4f:f3:6a:df:b3:8d:0b:70:67:fa:fd: 41:d1:9b:2b:4a:d8:aa:a3:ed:a0:62:01:a1:9f:05: 75:ba:fe:71:28:b6:eb:99:b6:61:08:a6:79:33:45: 91:4f:d7:9a:00:d9:73:59:92:69:54:f6:c2:ab:44: d8:32:59:9b:9a:2d:ad:01:21:6c:e2:8c:56:b3:12: 37:ff:46:8e:77:10:2a:e5:aa:e4:aa:a3:35:4b:89: 27:9f:03:71:eb:5a:8e:b2:3c:c0:33:9d:6d:ef:34: 9f:46:19:b0:fa:49:27:69:14:86:05:1f:1d:d4:db: 3a:d7:c5:b5:44:3f:17:55:35:5e:d5:e4:1c:5e:2b: 05:47:cc:cd:12:f6:be:a9:76:87:5b:21:9c:e0:d3: 7c:db:2f:72:ef:11:83:de:9c:eb:14:13:eb:76:05: aa:43:fb:31:3a:db:be:61:b3:fe:c6:1d:32:33:31: 88:02:31:0e:c9:b3:cc:99:59:93:92:3c:83:94:99: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4F:29:31:96:2B:47:C8:A3:CC:A7:7F:F9:89:30:59:95:9F:2B:DC X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7a:bd:4c:5e:27:2a:0c:bd:4f:d8:78:c1:9b:bc:74:3c:8c: 91:59:22:9b:38:4b:aa:ec:36:9b:b5:79:eb:cf:30:07:e3:09: d0:73:8b:bb:65:1a:28:25:7a:4a:81:71:c1:40:d9:77:ba:e8: 8f:c5:e9:e4:d0:b0:11:bd:24:ff:29:7f:e7:38:f4:ed:d4:ea: e9:d5:69:98:ef:2e:95:4e:09:1b:ca:ab:34:b0:6a:67:f2:15: 41:ed:7c:7f:b4:c6:21:7b:5b:ca:ce:c0:58:ec:72:a4:45:8a: f3:65:12:02:9c:5b:1d:6b:2c:d6:d1:cf:48:0a:06:f0:27:c5: df:ef:9b:34:69:fc:32:75:13:b5:4e:a1:82:af:ef:9d:83:b0: 05:7a:c7:ce:7b:0a:90:9f:cf:5a:cb:3c:72:08:15:7e:36:46: e7:c3:03:f2:14:73:98:04:ff:8e:a8:a3:6e:ef:8e:d0:ec:00: f2:24:e6:b9:f2:fa:d5:2e:65:10:38:fc:03:9d:f2:e4:f4:2a: 9f:9c:aa:ea:42:62:3d:02:e4:ac:87:a0:a2:f0:59:0a:cb:a1: 72:31:e0:6e:b3:0a:57:7d:18:99:9e:d1:76:12:01:fc:69:a9: 48:cf:00:a9:f0:50:17:0c:3d:b1:29:89:02:2e:05:a8:e4:1c: 6b:d7:8c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1IXkZ0mtPNDDYXUTY3OFnXVS78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNjA0MjAxODA2NTlaFw0yNjA0MjQwMTQ1NTlaMDMxMTAvBgNV BAMTKEUwNEYyOTMxOTYyQjQ3QzhBM0NDQTc3RkY5ODkzMDU5OTU5RjJCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aY4kTEV7LumE7cbsE/kzieJ/ WCDFK69ct5/K4m4oygGHzcDVqpO7r1W25QQjdXe2U27b8lK4EYopdDBz4RBP82rf s40LcGf6/UHRmytK2Kqj7aBiAaGfBXW6/nEotuuZtmEIpnkzRZFP15oA2XNZkmlU 9sKrRNgyWZuaLa0BIWzijFazEjf/Ro53ECrlquSqozVLiSefA3HrWo6yPMAznW3v NJ9GGbD6SSdpFIYFHx3U2zrXxbVEPxdVNV7V5BxeKwVHzM0S9r6pdodbIZzg03zb L3LvEYPenOsUE+t2BapD+zE6275hs/7GHTIzMYgCMQ7Js8yZWZOSPIOUmRIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4E8pMZYrR8ijzKd/+YkwWZWfK9wwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx6vUxeJyoMvU/YeMGbvHQ8jJFZIps4S6rs Npu1eevPMAfjCdBzi7tlGiglekqBccFA2Xe66I/F6eTQsBG9JP8pf+c49O3U6unV aZjvLpVOCRvKqzSwamfyFUHtfH+0xiF7W8rOwFjscqRFivNlEgKcWx1rLNbRz0gK BvAnxd/vmzRp/DJ1E7VOoYKv752DsAV6x857CpCfz1rLPHIIFX42RufDA/IUc5gE /46oo27vjtDsAPIk5rny+tUuZRA4/AOd8uT0Kp+cqupCYj0C5KyHoKLwWQrLoXIx 4G6zCld9GJme0XYSAfxpqUjPAKnwUBcMPbEpiQIuBajkHGvXjE8= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:36 2026 by rpki-client